Privacy policy
PRIVACY POLICY
Royal Dream Management S.r.l.
1. Data Controller
The Data Controller of personal data is:
Royal Dream Management S.r.l.
Registered office: Via Cappuccini 102/C – 70043 Monopoli (BA), Italy
Email: [email protected]
Personal data is processed in compliance with Regulation (EU) 2016/679 (“GDPR”), Italian Legislative Decree 196/2003 as amended by Legislative Decree 101/2018, and applicable national legislation.
2. Scope of Application
This Privacy Policy applies to the website www.royaldream.it, connected booking systems (booking engine and channel manager), contact and property evaluation forms, electronic communications, online payment services, and all data processing activities carried out by Royal Dream in the course of its business operations.
It does not apply to third-party websites that may be accessed through external links.
3. Categories of Personal Data Processed
3.1 Identification and Personal Data
First name, last name, date and place of birth, residence address, tax code, identification document details.
3.2 Contact Data
Email address, phone number, postal address.
3.3 Booking-Related Data
Stay dates, number of guests, specific requests, booking history, communications exchanged.
3.4 Tax and Accounting Data
Data required for invoicing and tax compliance.
3.5 Payment Data
Online payments are managed through certified external providers (Stripe Inc., Nexi S.p.A., PayPal (Europe) S.à r.l. et Cie, S.C.A., Apple Distribution International Ltd.).
Royal Dream does not store or have access to full credit card details.
3.6 Data Communicated to Authorities
Data transmitted to public security authorities through the “Alloggiati Web” portal in accordance with applicable law.
3.7 Browsing Data
IP address, system logs, data collected through cookies, analytics tools, and advertising pixels.
3.8 Data Collected Through the Property Evaluation Form
Through the website, property owners may submit a form providing:
- First and last name
- Contact details (email, phone)
- Property location and characteristics
- Economic information
- Property photographs
- Additional voluntarily provided information
Photographs are stored on the WordPress server hosting the website and transmitted via email to the Data Controller. They are accessible exclusively to the Data Controller and authorized collaborators.
3.9 Data Collected Through External Video Surveillance
Some properties may be equipped with external video surveillance systems exclusively for security purposes.
4. Purpose of Processing and Legal Basis
4.1 Contract Execution
- management of booking requests
- execution of the tourist rental agreement
- management of stay-related communications
- payment management
Legal basis: Art. 6(1)(b) GDPR.
4.2 Compliance with Legal Obligations
- communication of data to public security authorities
- tax and accounting compliance
- regulatory obligations
Legal basis: Art. 6(1)(c) GDPR.
4.3 Pre-Contractual Measures for Property Owners
- property evaluation
- preparation of commercial proposals
- management of negotiations
Legal basis: Art. 6(1)(b) GDPR.
4.4 Security and Asset Protection
- prevention of unlawful acts
- use of external video surveillance systems
Legal basis: Art. 6(1)(f) GDPR (legitimate interest).
4.5 Marketing and Promotional Communications
- newsletter distribution
- commercial offers
- remarketing activities
Legal basis: consent (Art. 6(1)(a) GDPR).
Consent may be withdrawn at any time.
4.6 Statistical and Advertising Analysis
- Google Analytics
- Google Ads
- Meta Pixel
- ActiveCampaign
Legal basis: consent, where required.
5. Processing Methods
Data processing is carried out using electronic and, where necessary, paper-based tools, adopting appropriate technical and organizational measures to ensure security, integrity, and confidentiality.
Photographs uploaded through the property evaluation form are stored on protected servers and accessible only to authorized personnel.
6. Disclosure of Data to Third Parties
Personal data may be disclosed to:
- Hosting providers and IT service providers
- Kross Booking (channel manager and booking engine)
- Google LLC
- Meta Platforms Inc.
- ActiveCampaign LLC
- Stripe Inc., Nexi S.p.A., PayPal (Europe), Apple Distribution International Ltd.
- Tax and accounting consultants
- Public authorities
These entities act as Data Processors or independent Data Controllers, depending on the case.
7. Transfer of Data Outside the EU
Certain providers (Google, Meta, ActiveCampaign, Stripe) may process data on servers located outside the European Union.
Transfers occur in compliance with GDPR safeguards, including Standard Contractual Clauses or other legally recognized guarantees.
8. Data Retention Period
- Contractual and tax data: up to 10 years
- Property owner data (without contract): maximum 24 months
- Marketing data: until withdrawal of consent
- Video surveillance data: generally no longer than 72 hours
- Browsing data: as specified in the Cookie Policy
9. Nature of Data Provision
The provision of data for contractual and legal purposes is mandatory.
The provision of data for marketing purposes is optional.
Failure to provide mandatory data may result in the inability to deliver requested services.
10. Data Subject Rights
Pursuant to Articles 15-22 of the GDPR, the data subject has the right to:
- access personal data
- request rectification
- request erasure
- request restriction of processing
- request data portability
- object to processing
- withdraw consent
- lodge a complaint with the Data Protection Authority
Requests may be sent to: [email protected]
11. Security Measures
Royal Dream adopts appropriate technical and organizational measures to prevent unauthorized access, loss, or unlawful use of data.
Authorized collaborators are bound by confidentiality obligations.
12. Updates
This Privacy Policy may be subject to updates. The latest version will always be available on the website.
Royal Dream Management S.r.l.
1. Data Controller
The Data Controller of personal data is:
Royal Dream Management S.r.l.
Registered office: Via Cappuccini 102/C – 70043 Monopoli (BA), Italy
Email: [email protected]
Personal data is processed in compliance with Regulation (EU) 2016/679 (“GDPR”), Italian Legislative Decree 196/2003 as amended by Legislative Decree 101/2018, and applicable national legislation.
2. Scope of Application
This Privacy Policy applies to the website www.royaldream.it, connected booking systems (booking engine and channel manager), contact and property evaluation forms, electronic communications, online payment services, and all data processing activities carried out by Royal Dream in the course of its business operations.
It does not apply to third-party websites that may be accessed through external links.
3. Categories of Personal Data Processed
3.1 Identification and Personal Data
First name, last name, date and place of birth, residence address, tax code, identification document details.
3.2 Contact Data
Email address, phone number, postal address.
3.3 Booking-Related Data
Stay dates, number of guests, specific requests, booking history, communications exchanged.
3.4 Tax and Accounting Data
Data required for invoicing and tax compliance.
3.5 Payment Data
Online payments are managed through certified external providers (Stripe Inc., Nexi S.p.A., PayPal (Europe) S.à r.l. et Cie, S.C.A., Apple Distribution International Ltd.).
Royal Dream does not store or have access to full credit card details.
3.6 Data Communicated to Authorities
Data transmitted to public security authorities through the “Alloggiati Web” portal in accordance with applicable law.
3.7 Browsing Data
IP address, system logs, data collected through cookies, analytics tools, and advertising pixels.
3.8 Data Collected Through the Property Evaluation Form
Through the website, property owners may submit a form providing:
- First and last name
- Contact details (email, phone)
- Property location and characteristics
- Economic information
- Property photographs
- Additional voluntarily provided information
Photographs are stored on the WordPress server hosting the website and transmitted via email to the Data Controller. They are accessible exclusively to the Data Controller and authorized collaborators.
3.9 Data Collected Through External Video Surveillance
Some properties may be equipped with external video surveillance systems exclusively for security purposes.
4. Purpose of Processing and Legal Basis
4.1 Contract Execution
- management of booking requests
- execution of the tourist rental agreement
- management of stay-related communications
- payment management
Legal basis: Art. 6(1)(b) GDPR.
4.2 Compliance with Legal Obligations
- communication of data to public security authorities
- tax and accounting compliance
- regulatory obligations
Legal basis: Art. 6(1)(c) GDPR.
4.3 Pre-Contractual Measures for Property Owners
- property evaluation
- preparation of commercial proposals
- management of negotiations
Legal basis: Art. 6(1)(b) GDPR.
4.4 Security and Asset Protection
- prevention of unlawful acts
- use of external video surveillance systems
Legal basis: Art. 6(1)(f) GDPR (legitimate interest).
4.5 Marketing and Promotional Communications
- newsletter distribution
- commercial offers
- remarketing activities
Legal basis: consent (Art. 6(1)(a) GDPR).
Consent may be withdrawn at any time.
4.6 Statistical and Advertising Analysis
- Google Analytics
- Google Ads
- Meta Pixel
- ActiveCampaign
Legal basis: consent, where required.
5. Processing Methods
Data processing is carried out using electronic and, where necessary, paper-based tools, adopting appropriate technical and organizational measures to ensure security, integrity, and confidentiality.
Photographs uploaded through the property evaluation form are stored on protected servers and accessible only to authorized personnel.
6. Disclosure of Data to Third Parties
Personal data may be disclosed to:
- Hosting providers and IT service providers
- Kross Booking (channel manager and booking engine)
- Google LLC
- Meta Platforms Inc.
- ActiveCampaign LLC
- Stripe Inc., Nexi S.p.A., PayPal (Europe), Apple Distribution International Ltd.
- Tax and accounting consultants
- Public authorities
These entities act as Data Processors or independent Data Controllers, depending on the case.
7. Transfer of Data Outside the EU
Certain providers (Google, Meta, ActiveCampaign, Stripe) may process data on servers located outside the European Union.
Transfers occur in compliance with GDPR safeguards, including Standard Contractual Clauses or other legally recognized guarantees.
8. Data Retention Period
- Contractual and tax data: up to 10 years
- Property owner data (without contract): maximum 24 months
- Marketing data: until withdrawal of consent
- Video surveillance data: generally no longer than 72 hours
- Browsing data: as specified in the Cookie Policy
9. Nature of Data Provision
The provision of data for contractual and legal purposes is mandatory.
The provision of data for marketing purposes is optional.
Failure to provide mandatory data may result in the inability to deliver requested services.
10. Data Subject Rights
Pursuant to Articles 15-22 of the GDPR, the data subject has the right to:
- access personal data
- request rectification
- request erasure
- request restriction of processing
- request data portability
- object to processing
- withdraw consent
- lodge a complaint with the Data Protection Authority
Requests may be sent to: [email protected]
11. Security Measures
Royal Dream adopts appropriate technical and organizational measures to prevent unauthorized access, loss, or unlawful use of data.
Authorized collaborators are bound by confidentiality obligations.
12. Updates
This Privacy Policy may be subject to updates. The latest version will always be available on the website.